Russia's Top State Hackers Adopt ClickFix Social Engineering Technique

Russia's most elite state-sponsored hackers have begun using ClickFix, a social engineering technique, to compromise devices. Previously, ClickFix was primarily associated with financially motivated cybercriminals rather than nation-state actors. The technique manipulates users into executing malicious commands on their own systems, making it an effective infection method. The adoption of this tactic by sophisticated Russian threat actors marks a notable shift in how advanced persistent threat groups operate. This development raises concerns among cybersecurity experts about the broader spread of the method across different categories of hackers.